Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vxG77fidovEnWXdwWkm1N68UBu8.roa
File:                     vxG77fidovEnWXdwWkm1N68UBu8.roa (raw, json)
Hash identifier:          ds4mlRQ4opJqhpIwNZWDYV7+em8gkAGqMCA9WMJa5zM=
Subject key identifier:   BF:11:BB:ED:F8:9D:A2:F1:27:59:77:70:5A:49:B5:37:AF:14:06:EF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0464
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vxG77fidovEnWXdwWkm1N68UBu8.roa
Signing time:             Thu 27 Jul 2023 16:44:01 +0000
ROA not before:           Thu 27 Jul 2023 16:44:01 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.72.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:01 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BF11BBEDF89DA2F1275977705A49B537AF1406EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:73:31:92:fc:1d:30:0a:29:e9:c3:63:95:
                    3d:73:1f:79:ea:55:be:e8:0f:76:cf:ab:dc:c6:5b:
                    4e:f7:be:f1:2e:65:47:ff:7e:fe:27:d7:75:44:4b:
                    af:58:97:3c:66:a5:a1:59:d2:20:06:49:b6:da:7b:
                    95:d5:0b:30:7e:95:37:47:18:74:1e:d4:ee:32:f0:
                    b7:15:7d:a6:ee:a6:0a:77:1b:bd:7f:94:40:96:ce:
                    c4:43:35:2f:97:03:3e:59:18:6f:f4:ca:29:0b:df:
                    5b:cf:1c:a1:db:ff:74:eb:51:83:0f:c9:cb:2d:51:
                    71:16:3b:13:9c:e7:38:0a:5f:f4:d0:23:38:06:ce:
                    62:87:50:f7:9b:36:67:02:ca:d6:db:af:0a:a3:21:
                    fd:72:eb:75:76:7a:a4:cb:ca:40:c2:f9:6f:b1:4b:
                    38:6e:00:39:40:29:d5:78:19:b8:ef:0e:32:fc:e2:
                    40:5f:42:68:08:6f:18:e9:f0:08:2e:71:91:af:ff:
                    3d:bf:a5:21:37:4d:97:ae:fd:53:6d:cd:54:3e:b7:
                    0a:e9:86:49:01:28:ad:f8:12:0c:af:37:7a:de:af:
                    22:7f:a5:ef:7c:ef:82:a1:3e:9b:cc:d9:37:99:b7:
                    8d:74:38:d3:94:f2:c6:44:85:a1:22:a9:61:93:f5:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:11:BB:ED:F8:9D:A2:F1:27:59:77:70:5A:49:B5:37:AF:14:06:EF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vxG77fidovEnWXdwWkm1N68UBu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.72.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c4:0c:f7:d3:12:a5:d1:42:c0:ce:c0:1f:f1:96:ea:07:90:c6:
         d1:b0:69:79:4a:7a:52:9d:53:fc:1b:ea:0a:2e:4e:1a:a1:d2:
         6d:69:27:55:94:87:71:c8:97:31:5a:16:2d:80:5e:b9:d7:86:
         8a:7d:80:17:16:0a:b4:91:0a:2d:be:cf:48:87:bf:c0:8f:6f:
         3b:0b:0b:a6:35:dc:40:f7:27:99:f7:4d:77:ab:3d:a8:fa:df:
         1e:4f:95:e3:43:a7:21:e4:1c:5b:e2:3d:9f:87:c6:b5:a8:eb:
         20:6e:74:3d:0a:d2:0a:34:d7:58:48:2c:05:dc:ef:bb:c2:41:
         a6:81:7c:61:97:fe:f9:04:d6:7c:d4:7c:07:2b:2b:39:e1:1c:
         1c:ae:8a:a7:b3:96:07:88:67:fd:69:f6:c5:7d:b4:05:de:73:
         20:5b:2e:a1:bc:85:64:7a:94:69:e7:53:1d:a4:b8:d6:de:f4:
         fa:c9:c6:6f:d5:e3:b5:2c:54:5c:43:b1:01:4c:07:01:d0:49:
         48:c9:44:2a:c7:73:40:40:20:c7:0d:ad:46:2d:1a:15:73:f9:
         db:1e:7a:9e:8e:ec:a1:8c:97:05:f0:da:f7:ad:cf:9b:af:8b:
         b6:30:4d:dc:b8:64:a2:81:ca:50:5f:ef:ed:aa:f2:f1:4c:06:
         92:e5:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org